Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 3.173.21.37 |
| Server Software | envoy |
| CDN | CDN (Miss from cloudfront) |
| Compression | gzip |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 3.173.21.37
Server Software envoy
CDN CDN (Miss from cloudfront)
Compression gzip
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://sofort.com:443 | 301 | HTTP/2 301 |
| 2 | https://www.klarna.com/de/sofortueberweisung-ist-jetzt-klarna/ | 200 | HTTP/2 200 |
#1 URL https://sofort.com:443
HTTP Status Code 301
Status HTTP/2 301
#2 URL https://www.klarna.com/de/sofortueberweisung-ist-jetzt-klarna/
HTTP Status Code 200
Status HTTP/2 200
Performance
| DNS Lookup | 12.8 ms |
| TCP Connect | 13.5 ms |
| TLS Handshake | 4.1 ms |
| Time To First Byte (TTFB) | 152.5 ms |
| Content Download | 8 ms |
| Total Response Time | 160.5 ms |
DNS Lookup 12.8 ms
TCP Connect 13.5 ms
TLS Handshake 4.1 ms
Time To First Byte (TTFB) 152.5 ms
Content Download 8 ms
Total Response Time 160.5 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=31536000; includeSubDomains; preload |
| CSP | ✔ Configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ✔ nosniff |
| Referrer Policy | strict-origin-when-cross-origin |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=31536000; includeSubDomains; preload
CSP ✔ Configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ✔ nosniff
Referrer Policy strict-origin-when-cross-origin
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
| Title | Sofortüberweisung ist jetzt Klarna |
| Meta Description | Bezahle per Sofortüberweisung mit der Zahlungsmethode, die du kennst – sicherer und einfacher als je zuvor. |
| Robots Meta | index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1 |
| Open Graph Title | Sofortüberweisung ist jetzt Klarna |
| Open Graph Image | https://locker.klarna.com/transform/722b7494-1c82-4e4f-aa... |
Title Sofortüberweisung ist jetzt Klarna Meta Description Bezahle per Sofortüberweisung mit der Zahlungsmethode, die du kennst – sicherer und einfacher als je zuvor. Robots Meta index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1 Open Graph Title Sofortüberweisung ist jetzt Klarna Open Graph Image https://locker.klarna.com/transform/722b7494-1c82-4e4f-aa... Detected Technologies
| Technology | Google Analytics Google Tag Manager HubSpot |
Technology Google Analytics Google Tag Manager HubSpot
HTTP Headers
| Content-type
| text/html; charset=utf-8 |
| Date
| Thu, 20 Aug 2026 05:27:20 GMT |
| X-response-origin
| service |
| Server
| envoy |
| Klarna-correlation-id
| 12c520b1-ff95-42ce-bb3a-2ecb1edaca03 |
| Surrogate-control
| no-store |
| Cache-control
| no-store, no-cache, must-revalidate, proxy-revalidate |
| Expires
| 0 |
| Cross-origin-embedder-policy
| unsafe-none |
| Origin-agent-cluster
| ?1 |
| Referrer-policy
| strict-origin-when-cross-origin |
| Strict-transport-security
| max-age=31536000; includeSubDomains; preload |
| X-permitted-cross-domain-policies
| none |
| Content-security-policy
| default-src 'self';script-src 'self' 'strict-dynamic' 'wasm-unsafe-eval' 'nonce-12c520b1-ff95-42ce-bb3a-2ecb1edaca03' 'report-sample' https://owp.klarna.com/ https://cdn.cookielaw.org/;style-src 'self' 'unsafe-inline' 'report-sample' https://owp.klarna.com/ https://www.gstatic.com/ https://x.klarnacdn.net/;img-src 'self' data: blob: https: chrome-extension:;media-src 'self' data: https: blob:;connect-src 'self' *.google.com *.google-analytics.com *.googlesyndication.com *.googletagmanager.com www.googleadservices.com *.adtrafficquality.google fonts.googleapis.com translate.googleapis.com fonts.gstatic.com www.gstatic.com ssl.google-analytics.com csi.gstatic.com *.g.doubleclick.net bat.bing.com *.klarna.com klarna-eu.api.unboxai.com klarna.atlassian.net production.videos.production.eu1.influencer-platform.klarna.net x.klarnacdn.net assets.klarnacdn.net api.videoly.co o24547.ingest.us.sentry.io *.onetrust.com *.cookielaw.org cookies-data.onetrust.io www.youtube.com images.ctfassets.net videos.ctfassets.net images.pricerunner.com evt2.klarna.app tr.snapchat.com tr6.snapchat.com sc-static.net ams.creativecdn.com eu-production-asp-ingestion-assets-upload-hold.s3.eu-west-1.amazonaws.com ;font-src 'self' https: data:;frame-src 'self' *.snapchat.com *.klarna.com *.klarnacdn.net *.adtrafficquality.google *.googlesyndication.com *.googletagmanager.com *.googleadservices.com *.googletagservices.com *.doubleclick.net *.google.com www.youtube.com www.youtube-nocookie.com *.criteo.com osm.klarnaservices.com open.spotify.com ams.creativecdn.com hackerone.com neu.mein-onlineantrag.de platform.twitter.com syndication.twitter.com;base-uri 'self';manifest-src 'self';object-src 'none';frame-ancestors 'self' *.klarna.com app.contentful.com;upgrade-insecure-requests |
| Link
| ; rel=preconnect; crossorigin |
| Vary
| Accept-Encoding |
| Content-encoding
| gzip |
| X-envoy-upstream-service-time
| 108 |
| X-cache
| Miss from cloudfront |
| Via
| 1.1 4756b7e0ebcafb62886b18ec3b8cea7c.cloudfront.net (CloudFront) |
| X-amz-cf-pop
| CDG52-P4 |
| Alt-svc
| h3=":443"; ma=86400 |
| X-amz-cf-id
| sUhlGVDYq43N0fmXv1Z9irA63HIyegpZUbs9fP_wstUUG3B95Fbe-g== |
| X-content-type-options
| nosniff |
Meta Tags
| Viewport | width=device-width,initial-scale=1 |
| Format-detection | telephone=no, date=no, email=no, address=no |
| Mobile-web-app-capable | yes |
| Apple-mobile-web-app-capable | yes |
| Theme-color | #ffffff |
| Msapplication-TileColor | #ffffff |
| Msapplication-TileImage |  |
| Description | Bezahle per Sofortüberweisung mit der Zahlungsmethode, die du kennst – sicherer und einfacher als je zuvor. |
| Robots | index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1 |
Content-type text/html; charset=utf-8
Date Thu, 20 Aug 2026 05:27:20 GMT
X-response-origin service
Server envoy
Klarna-correlation-id 12c520b1-ff95-42ce-bb3a-2ecb1edaca03
Surrogate-control no-store
Cache-control no-store, no-cache, must-revalidate, proxy-revalidate
Expires 0
Cross-origin-embedder-policy unsafe-none
Origin-agent-cluster ?1
Referrer-policy strict-origin-when-cross-origin
Strict-transport-security max-age=31536000; includeSubDomains; preload
X-permitted-cross-domain-policies none
Content-security-policy default-src 'self';script-src 'self' 'strict-dynamic' 'wasm-unsafe-eval' 'nonce-12c520b1-ff95-42ce-bb3a-2ecb1edaca03' 'report-sample' https://owp.klarna.com/ https://cdn.cookielaw.org/;style-src 'self' 'unsafe-inline' 'report-sample' https://owp.klarna.com/ https://www.gstatic.com/ https://x.klarnacdn.net/;img-src 'self' data: blob: https: chrome-extension:;media-src 'self' data: https: blob:;connect-src 'self' *.google.com *.google-analytics.com *.googlesyndication.com *.googletagmanager.com www.googleadservices.com *.adtrafficquality.google fonts.googleapis.com translate.googleapis.com fonts.gstatic.com www.gstatic.com ssl.google-analytics.com csi.gstatic.com *.g.doubleclick.net bat.bing.com *.klarna.com klarna-eu.api.unboxai.com klarna.atlassian.net production.videos.production.eu1.influencer-platform.klarna.net x.klarnacdn.net assets.klarnacdn.net api.videoly.co o24547.ingest.us.sentry.io *.onetrust.com *.cookielaw.org cookies-data.onetrust.io www.youtube.com images.ctfassets.net videos.ctfassets.net images.pricerunner.com evt2.klarna.app tr.snapchat.com tr6.snapchat.com sc-static.net ams.creativecdn.com eu-production-asp-ingestion-assets-upload-hold.s3.eu-west-1.amazonaws.com ;font-src 'self' https: data:;frame-src 'self' *.snapchat.com *.klarna.com *.klarnacdn.net *.adtrafficquality.google *.googlesyndication.com *.googletagmanager.com *.googleadservices.com *.googletagservices.com *.doubleclick.net *.google.com www.youtube.com www.youtube-nocookie.com *.criteo.com osm.klarnaservices.com open.spotify.com ams.creativecdn.com hackerone.com neu.mein-onlineantrag.de platform.twitter.com syndication.twitter.com;base-uri 'self';manifest-src 'self';object-src 'none';frame-ancestors 'self' *.klarna.com app.contentful.com;upgrade-insecure-requests
Link ; rel=preconnect; crossorigin
Vary Accept-Encoding
Content-encoding gzip
X-envoy-upstream-service-time 108
X-cache Miss from cloudfront
Via 1.1 4756b7e0ebcafb62886b18ec3b8cea7c.cloudfront.net (CloudFront)
X-amz-cf-pop CDG52-P4
Alt-svc h3=":443"; ma=86400
X-amz-cf-id sUhlGVDYq43N0fmXv1Z9irA63HIyegpZUbs9fP_wstUUG3B95Fbe-g==
X-content-type-options nosniff
